Nordic Regional Airlines Oy (Norra) respects and protects your privacy and complies with applicable legislation and good data protection practices in its operations. In this privacy statement, we inform you about your data protection rights and how we collect and process your personal data.

‍

We collect personal data from:

‍

• Visitors to our website
• Individuals with whom we conduct business
• Individuals whose personal data is provided to us for the delivery of our services
• ‍

In this privacy statement, “websites” refer to this site and our social media pages.

‍

A separate privacy statement applies to the processing of personal data of job applicants, which can be found further down on this page.

‍

Legal obligations as a basis for data processing refer, in this context, to national and international aviation legislation as well as binding regulatory requirements applicable to Norra.

‍

Personal Data We Collect

‍
We may ask individuals to provide personal data, for example via our website. Individuals may also voluntarily provide personal data by contacting us by phone, email, or through our website.

‍

When providing our services, we may receive personal data from airlines whose services we deliver, as well as from other companies involved in the processing of passenger information. Such data may include: name, address, contact information, and other information necessary for delivering our services.

‍

Purposes of Processing Personal Data

‍
We only process your personal data for the following purposes (with the legal basis for processing in parentheses):

‍

• To manage our customer relationship with you and to provide our services (contract, compliance with legal obligations)
• ‍
• To maintain and operate our website and social media services (our legitimate interests – you have the right to object to processing at any time)
• ‍
• To disclose information to third parties, including our service providers (compliance with legal obligations, protection of vital interests)
• ‍

We retain your personal data only as long as necessary.

‍

We may collect, process, and analyze information about the use of our site, traffic, events, and other statistical data related to the site. We may also obtain such information from reliable third parties. This type of anonymized statistical data cannot be traced back to an individual.

‍

Cookie Policy

‍
When you use our website, your browser may store a small file sent to your device, known as a cookie. Cookies allow us to recognize your device and gather certain information about how it is used on our website. For example, cookies may allow previously submitted information, such as your address, to be automatically filled in on a page when visiting from the same device.

‍

Your browser likely accepts cookies by default, but you may be able to change your browser settings to disable or remove cookies from your device. Some services may require the acceptance of cookies in order to function properly. With the help of cookies and usage data, we aim to improve our services to better meet your and other customers’ preferences.

‍

Links to Third-Party Websites

‍
Our website may occasionally contain links to other websites. If you click such a link, please note that these websites have their own privacy policies, for which Norra assumes no responsibility. Please review those privacy policies before providing personal data to any third-party websites.

‍

Your Rights

‍
Subject to the limitations of data protection legislation, you have the right to:

‍

• Obtain a copy of your personal data held by us
• ‍
• Have inaccurate or incomplete personal data corrected
• ‍
• Request deletion of your personal data in certain situations
• ‍
• Request us to stop processing your personal data in certain situations
• ‍
• Object to the processing of your personal data where the processing is based on Norra’s or third parties’ legitimate interests
• ‍
• Request that we provide the personal data you have given us to a third party or receive a copy of it for this purpose, where technically feasible
• ‍
• Lodge a complaint with the Data Protection Ombudsman if you suspect your personal data is being processed in violation of the GDPR
• ‍

If you wish to exercise any of the above rights, please contact us (Feedback). We will respond to your request within one month. This period may be extended by up to two additional months depending on the number or complexity of the requests. We may request proof of identity to confirm the legitimacy of your request.

‍

Data Security

‍
We are committed to protecting your personal data. We employ technical and organizational safeguards to prevent unauthorized access to and use of your personal data. Norra personnel are instructed on how to handle personal data, ensuring data security across all company operations. We continuously develop our data protection practices and adopt new methods and technical safeguards as needed.

‍

Changes to the Privacy Statement

‍
Any changes to this privacy statement will be posted on this website, and the “Last updated” date at the bottom of the page will be revised accordingly. Please review this privacy statement periodically for updates.

‍

Contact Us

‍
You may send us questions, comments, requests, or complaints regarding this privacy statement or how we process personal data. You can contact us by email at tietosuoja@flynorra.com or by mail at:

Norra Data Protection
Tietotie 9
01530 Vantaa, Finland

Please mark the recipient as “Norra Data Protection.”

‍

© Nordic Regional Airlines 2024. Last updated: October 2, 2024.

Principles for the Protection of Job Applicants' Personal Data at Nordic Regional Airlines Oy

‍

Nordic Regional Airlines Oy (Norra) protects the personal data of job applicants and complies with applicable legislation and good data protection practices. This privacy statement explains how Norra collects and processes the personal data of job applicants.

‍

Personal data refers to any information that can be linked to an identifiable individual. The legal basis for processing personal data is the applicant’s consent, provided as part of the recruitment process.

‍

Norra may use services provided by third parties during recruitment. In such cases, Norra ensures the appropriate protection of applicants’ personal data through contractual agreements. Norra uses the TalentAdore recruitment service for handling applicant data, in which case the data processor is TalentAdore Oy. TalentAdore Oy has its own data protection practices approved by Norra.

‍

What Information Do We Collect?

‍

Norra collects personal data from applicants that is necessary for the purposes defined in this privacy statement.

‍

Information you provide to Norra, including:

Contact details, such as name, address, phone number, and email address, age, gender, occupation, and native language

• Personal identity code and passport number, educational background, photograph, employment history, reference information, diplomas and employment certificates, LinkedIn or similar profile, and other information you submit in connection with your job application
• ‍

We collect this data through various means, including the TalentAdore recruitment service, interviews, and aptitude assessments.

‍

As a rule, we do not process sensitive personal data of job applicants. However, applications may contain sensitive data submitted at the applicant's own initiative, and Norra cannot influence whether such information is included.

‍

Why Do We Process Personal Data?

‍

We process your personal data in order to evaluate your suitability for a role based on the information you provide and to communicate with you about the progress of the recruitment process.

‍

How Do We Store and Combine Personal Data?

‍

Norra’s primary system for storing recruitment data is the TalentAdore recruitment platform provided by TalentAdore Oy. If you are selected for a position or for a training course for cabin crew or flight crew, the information you provided during the recruitment process will be transferred to Norra’s Human Resources system before your employment officially begins.

‍

The system may be used to generate listings and reports for the needs of Norra’s Human Resources department. For reporting purposes, the data will be anonymized so that individuals cannot be identified.

‍

Do We Disclose Personal Data?

‍

Norra does not disclose personal data collected for recruitment purposes to external parties, except where required by mandatory law. TalentAdore Oy acts as Norra’s data processor and may use subcontractors approved by Norra to deliver its services.

‍

Norra may disclose your contact details to third-party service providers, for example for aptitude testing. For employees selected for hire, Norra may, where legally required under Section 19 of the Security Clearance Act (726/2014), request a basic security clearance. In connection with this process, Norra may disclose personal data of the selected employee to the competent authorities.

How Do We Ensure Data Accuracy?

‍

We make reasonable efforts to keep the personal data we hold accurate by removing unnecessary information and updating outdated data. If an applicant is registered in the TalentAdore recruitment system, they can update their own information during the recruitment process.

‍

How Do We Protect Your Personal Data?

‍

We pay special attention to data protection and information security when designing, implementing, and maintaining our services. We use appropriate physical, technical, and administrative safeguards to protect your personal data from misuse. At Norra, designated individuals are responsible for data protection and information security.

‍

Only employees who need access to recruitment-related personal data for their job duties are authorized to use systems containing such data. Each user has a unique username and password for accessing the recruitment system. The system is protected with firewalls, passwords, and other technical measures.

‍

We implement data protection and security through proactive risk management, by integrating privacy and security into the design of our services, training our staff, and regularly auditing compliance with our requirements. When using subcontractors or service providers, we ensure—through contractual and other arrangements—that your personal data is processed in accordance with applicable legislation, good data protection practices, and this privacy statement.

‍

How Long Do We Retain Your Data?

‍

We retain your data for a maximum of two years from the date it was submitted. After the retention period, the data is automatically deleted from the TalentAdore recruitment system. You may also request the deletion of your data before the two-year period ends.

‍

What Are Your Rights?

‍

Under applicable law, you have the right to review the personal data we have collected about you. You also have the right to request the correction or deletion of inaccurate, incomplete, unnecessary, or outdated personal data.

‍

You can submit a request for access or deletion by emailing hr[at]flynorra.com. For identification purposes, the request must be sent from the same email address you used during the recruitment process.

‍

Who Is the Data Controller and How Can I Contact You?

‍

The data controller for your personal data is:

Nordic Regional Airlines Oy
Tietotie 9, 01530 Vantaa, Finland

For matters related to privacy, you can contact us by email at tietosuoja[at]flynorra.com. You may also send mail to the above postal address, addressed to Norra Data Protection.

‍

© Nordic Regional Airlines 2024. Last updated: October 2, 2024.